Docker runs abbhorently, instability and having to restart every week or so (tried Raspbian, Arch, Alpine, and all went unstable in a couple of days, even tried changing the SD and power supply).
Back on the day, sure, ARM was the thing you wanted if you went for maximum power saving, but I think there are comparable options that give more bank for your buck in the x86 space, especially if you want to repurpose it later.
In the end, go for whatever you want, you can always sell it later if you don’t like it. I’d just personally wouldn’t go for ARM anymore.
If I was buying a Pi, I’d go second hand.
You basically never want to expose your local network to the internet. The most secure and simple way are either Tailscale or WireGuard combined with a VPS that is exposed to the internet and takes all the beating.